Ask the Expert

Connecting a SAN in the DMZ

What problems would I encounter if I tried to connect our SAN in the DMZ, as opposed to connecting to our normal LAN? I have been told there are management issues between processors, etc.

    Requires Free Membership to View

    Login

Storage management interfaces should be located behind the firewall for security reasons.

If you are talking about connecting Internet facing servers to the SAN, then good SAN security practices should be put in place, such as hard zoning, etc. Also, since Internet facing servers can be compromised, those servers should also be hardened and protected from viruses and attacks. If you want to connect NAS storage in the DMZ, using a separate storage device in that space would provide the best protection.

This was first published in June 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.
    Back to top